14-day free trial. No credit card required. GDPR-native. Setup in under 5 minutes.
All prices in USD, excluding applicable taxes. VAT calculated at checkout.
See which AI bots appear among the visits measured on your site, by name and company. Display your badge.
Full AI analytics + bot protection for growing EU websites.
Teams, webhooks, and data export for high-traffic websites.
Service terms agreed individually and priority support.
AI companies are signing content-licensing deals with publishers, and the ones who know their crawler traffic negotiate first. HumanKey logs which AI systems appear among the visits measured on your site, how often, and which pages they read — the data you need to license your content, join pay-per-crawl programs, or understand what your work is worth. Meanwhile, your reports show advertisers how much of your traffic was classified as human.
Each pageview on your site triggers one verification. HumanKey analyzes signals from each request to determine whether the visitor is human, a bot, or an AI crawler.
The Free plan is a badge plan — it lets you display the Human Traffic Status Badge and see a basic AI crawler report. It's not designed for production use. Start a 14-day Pro trial to evaluate HumanKey on real traffic.
You will see a prompt to upgrade, and your badge and dashboard remain fully accessible. The Free plan is not built for sustained traffic above its limit — upgrade to Pro for full, uninterrupted protection.
Yes — the Pro plan includes a 14-day free trial, and every new account starts on it. No credit card required to start.
No — not unless you add a payment method yourself. If you never add a card, your account moves to the Free plan when the trial ends — no charge. For 7 days after that (the grace period) you keep your trial features and can choose in Dashboard → Sites which sites stay active; the others are paused. If you don't choose, the sites that most recently received traffic stay active. When the grace period ends, data older than the Free plan's retention period (7 days) is permanently deleted from all your sites, including paused ones — export it first if you need it. Adding a card later reactivates paused sites within your new plan's limit. To keep Pro, add a card any time from Dashboard → Billing; from that point it's a normal recurring subscription.
Yes — plan changes are managed through Dashboard → Billing. Upgrades take effect immediately with proration. A cancellation takes effect at the end of your current billing period. After any move to a lower plan — including the end of a trial or subscription — your previous plan's features stay available for a 7-day grace period (see our Terms of Service). Switching from monthly to yearly applies the 20% discount immediately. Switching yearly to monthly takes effect at your next renewal.
Open Dashboard → Billing and click "Switch to yearly" on your current plan card. A confirmation dialog shows the prorated amount due today (your yearly price minus credit for the unused part of the current monthly period) and the new renewal date 12 months out. Click Confirm — the change applies immediately and your card is charged for the prorated balance. To switch yearly back to monthly, use the "Switch to monthly" link on the same card; that change takes effect at your next renewal with no charge today.
Enterprise Starter ($499/mo) includes 5M verifications/month, 25 sites, and 10 team seats with priority support. Enterprise Growth ($1,499/mo) scales to 20M verifications, 75 sites, 25 team seats, and adds a dedicated support manager with custom onboarding. Both include 365-day data retention; the Data Processing Agreement is on every plan, as an annex to the Terms. Enterprise Custom is a fully bespoke contract with unlimited usage and dedicated engagement — contact sales for a quote.
Yes — that's our AI Magnet feature. Beyond detecting AI traffic, HumanKey helps you choose which AI crawlers to welcome. With 60+ bots classified across 6 tiers (Major AI, Search Engine, AI Search, Data Collection, Platform, Unknown), you get smart recommendations on which to allow or block. You can audit your robots.txt, see where crawlers come from, and generate llms.txt and structured data (JSON-LD) — while blocking scrapers and bad bots.
AI Magnet classifies every detected crawler into 6 tiers and gives you smart recommendations based on your traffic patterns. Allow, monitor, or block each bot with one click. Free users can configure up to 3 bots manually. Pro users get full configuration with auto-recommendations. Business users additionally get robots.txt audit and crawler origin analytics (country + network).
Every plan classifies traffic from crawler taxonomy, network signals, and request metadata, producing a confidence-graded verdict that separates known AI bots and automated traffic from humans. Pro and higher plans add a behavioral-analysis layer (aggregate interaction patterns) and an advisory ML score that highlight sophisticated automation for your review. Classification needs no names, e-mail addresses, accounts or cookies, and it does not try to establish who a visitor is.
HumanKey identifies coordinated bot networks using a proprietary multi-stage analysis pipeline. Our system detects patterns of coordinated activity from shared infrastructure — even when individual bots appear different. This analysis runs on our servers in the EU.
In stored traffic data, IP addresses are kept only in pseudonymised form (a keyed hash). We place no cookies on your visitors, build no cross-site or persistent visitor profile and store traffic data in the EU (Frankfurt and Amsterdam). As an account holder you can use these GDPR rights in the dashboard: access (Art. 15), erasure (Art. 17) and portability (Art. 20). Our DPIA, Transfer Impact Assessment (TIA) and DORA mapping are public — start at /legal/dpia. The Data Processing Agreement (GDPR Art. 28) is an annex to the Terms of Service on every plan and is accepted with them.
Not ready to commit yet? Request a free 7-day AI crawler report for your site →
Your data protection is our priority
All primary data is stored in the European Union — database in Frankfurt, application servers in Amsterdam — with encryption at rest and in transit. Some sub-processors are US companies; they are listed in our sub-processor list and assessed in our transfer impact assessment.
We keep it to a minimum. In stored traffic data, IP addresses are kept only in pseudonymised form (a keyed hash), and User-Agent strings are truncated. We place no cookies on your visitors. Under GDPR this pseudonymised data is still personal data, and we treat it as such — see our DPIA.
In stored traffic data, IP addresses are kept only in pseudonymised form (a keyed hash). We place no cookies on your visitors, build no cross-site or persistent visitor profile and store traffic data in the EU (Frankfurt and Amsterdam). As an account holder you can use these GDPR rights in the dashboard: access (Art. 15), erasure (Art. 17) and portability (Art. 20). Our DPIA, Transfer Impact Assessment (TIA) and DORA mapping are public — start at /legal/dpia. The Data Processing Agreement (GDPR Art. 28) is an annex to the Terms of Service on every plan and is accepted with them.
Your data is automatically deleted according to your plan’s retention period (7–365 days). No lock-in, no hidden data retention.
We use security headers, a Content Security Policy and limits on repeated requests.
Contact us about security reviews and service terms for Enterprise plans. The Data Processing Agreement is the same on every plan, as an annex to the Terms.